Description
An issue was discovered in GitLab CE/EE affecting all versions starting from 17.2 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1, that allows an attacker to cause uncontrolled CPU consumption, potentially leading to a Denial of Service (DoS) condition while using specific GraphQL queries.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GitLab | GitLab | 17.2 – < 18.2.7, 18.3 – < 18.3.3, 18.4 – < 18.4.1 | 18.2.7 |
Advisories 2
- WID-SEC-2025-2140 GitLab: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 27, 2025
- NCSC-2025-0300 Kwetsbaarheden verholpen in GitLab EE & CE NCSC-NL (Netherlands) · Sep 29, 2025
References
- GitLab Issue #550374 issue-tracking permissions-required